Every user can read any file while ACL mass change in progress

Hi!
We're having some strange things happening here. Maybe someone can help us what exactly is/was going on here.
1. We have to add an additional user in the NTFS ACL list for all file shares in our company (about XXXTB)
2. We're using Windows Explorer to accomplish that.
3. Every user can read in directories he/she has NO ACCESS RIGHTS to while the changes are being applied.
4. Files are also readable but at least still not writeable.
5. Affected folders and files change over time.
Has someone experienced the same issue? Does the Windows Explorer reset the ACL lists before changing them? Is there some weird caching going on?

I unfortunately can't send you a screenshot as this would be a violation of our company rules.
I can however ensure you that we never have any normal user or group besides the very guarded admin group that has read permissions in all folders. I'm also sure that the colleague was only adding the additional account for the indexing service and did that
by adding the permission via the properties tab in Windows Explorer. I restate that this is a very large data dir with about 6 Terrabytes of data the change was made to. The rest of our data was safe.
We guard our rights very closely as any unauthorized access that isn't fixed within minutes will cause a security incident that has to be documented by our department chief. As such was the case here.
As we've got no answer here yet, I can conclude that this is not a very common problem.

Similar Messages

  • I'm trying to share folder between users on a single mac.  I put the folder in "shared," set permissions so other user can read and write, enabled file sharing, but can't find the folder on the second user's account.  Any help?

    I'm trying to share a folder between users on a single mac.  I want both users to be able to read and write so the folder stays current on both accounts.  I put the folder in "shared," set permissions on folder so other user can read and write, enabled file sharing, but can't find the folder on the second user's account.  Any help?

    Did you log out of one account and into the other or just used Fast user switching?
    Is the permissions set to anyone?
    When you move data to teh Shared folder is it copied or just moved?
    If copied then it's not a folder both can access, just a way station like a USB thumb drive that things are coped too and off of likely.
    You can run this #5 on each user account to reset the user permissions once they are taken back out of the Shared folder
    Step by Step to fix your Mac

  • Hi when i switch on the macc 41 files open at once can not open any files while this is happing can still use AI & PS and the internet any help thanks...

    Hi when i switch on the macc 41 files open at once can not open any files while this is happing can still use AI & PS and the internet any help thanks...

    Are you wanting to stop the 41 files from opening at once or is this intentional? At what point do they open when you power on the mac or when you boot Illustrator? What OS version are you using?
    If you can  answer the questions above can provide better advice, but you may be running into something similar:
    http://www.mactip.net/stop-lion-restoring-previous-files-apps/

  • HT201210 Is there any way I can update my iPod's system so that I can read pdf files?

    I want to download an app where I can read pdf files, but there are no apps for my operating system it seems like.

    See:
    https://itunes.apple.com/us/app/id416920664?mt=8
    Requirements: Compatible with iPhone, iPod touch, and iPad. Requires iOS 4.2 or later.

  • How to read any file using external tables.

    Hi folks,
    I have written an application that reads a series of csv files using external tables which works fine as long as I specify each file name in the directory i.e.......
    CREATE TABLE gb_test
    (file_name varchar2(10),
    rec_date date
    rec_name VARCHAR2(20),
    rec_age number,
    ORGANIZATION EXTERNAL
    TYPE ORACLE_LOADER
    DEFAULT DIRECTORY GB_TEST
    ACCESS PARAMETERS
    RECORDS DELIMITED BY NEWLINE
    FIELDS TERMINATED BY ','
    LOCATION ('data1.csv','data2.csv','data3.csv','data4.csv')
    PARALLEL 5
    REJECT LIMIT 20000;
    However I have discovered that I may not know the name of the files to be processed prior to the program being run so just want to read any file regardless of it's name (although it will always be a .csv file).
    Is there a way to ensure that you don't need to specify the files to be read in the LOCATION part of the syntax.
    Thanks in advance.
    Graham.

    Right, I have now completed this, however it's currently only working as SYS as opposed to any user, however here is a detail of the scenario and the steps required in case any of you guys need in the future ......
    The problem was I needed to search for csv files on my hard-drive. These files would be stored in a series of directories (a through to z), so I needed a way to read all 26 directories and process all files in these directories.
    The problem was, prior to running the program, the user would remove all the files in the directories and insert new ones, but it was never known how many he would decide to do each time.
    Solution: I created a table called stock_data_directories as follows ...
    create table stock_data_directories(sdd_rec_no number,
    sdd_table_name varchar2(50),
    sdd_directory_name varchar2(50),
    sdd_directory_path varchar2(100));
    Then inserted 26 records like ...
    insert into stock_data_directories(sdd_rec_no,sdd_table_name,sdd_directory_name,sdd_directory_path)
    values(1,'rawdata_a','KPOLLOCKA','C:\KPOLLOCK\A')
    insert into stock_data_directories(sdd_rec_no,sdd_table_name,sdd_directory_name,sdd_directory_path)
    values(2,'rawdata_b','KPOLLOCKB','C:\KPOLLOCK\B');
    etc...etc...
    Then created 26 DIRECTORIES E.G.
    CREATE OR REPLACE DIRECTORY KPOLLOCKA AS 'C:\KPOLLOCK\A';
    CREATE OR REPLACE DIRECTORY KPOLLOCKB AS 'C:\KPOLLOCK\B';
    Then created 26 external tables like the following ...
    CREATE TABLE rawdata_a
    (stock varchar2(1000),
    stock_date varchar2(10),
    stock_open VARCHAR2(20),
    stock_high varchar2(20),
    stock_low varchar2(20),
    stock_close VARCHAR2(30),
    stock_qty varchar2(20) )
    ORGANIZATION EXTERNAL
    TYPE ORACLE_LOADER
    DEFAULT DIRECTORY KPOLLOCKA
    ACCESS PARAMETERS
    RECORDS DELIMITED BY NEWLINE
    FIELDS TERMINATED BY ','
    LOCATION ('AA.csv')
    PARALLEL 5
    REJECT LIMIT 20000
    This basically says in directory rawdata_a it currently has 1 file called AA.csv.
    Then wrote a procedure as follows ...
    procedure p_process_files(pv_return_message OUT varchar2)is
    cursor c_get_stock_data_directories is
    select distinct sdd_directory_path,
    sdd_table_name
    from stock_data_directories
    order by sdd_table_name;
    vv_return_message varchar2(1000);
    begin
    -- here get the files for each directory
    for r_get_stock_directories in c_get_stock_data_directories loop
    p_build_external_table(r_get_stock_directories.sdd_directory_path,
         r_get_stock_directories.sdd_table_name,
         vv_return_message);
    end loop;
    end;
    then wrote a procedure called p_build_external_table as follows ...
    procedure p_build_external_table(pv_directory_path IN stock_data_directories.sdd_directory_path%type, -- e.g. 'C:\kpollock\A\
    pv_table_name IN stock_data_directories.sdd_table_name%type, -- e.g. rawdata_a
    pv_return_message OUT varchar2) is
    vv_pattern VARCHAR2(1024);
    ns VARCHAR2(1024);
    vv_file_name varchar2(4000);
    vv_start_string varchar2(1) := '''';
    vv_end_string varchar2(3) := ''',';
    vn_counter number := 0;
    vv_err varchar2(2000);
    BEGIN
    vv_pattern := pv_directory_path||'*';
    SYS.DBMS_BACKUP_RESTORE.searchFiles(vv_pattern, ns);
    FOR each_file IN (SELECT FNAME_KRBMSFT AS name FROM X$KRBMSFT) LOOP
    if each_file.name like '%.CSV' then
    vv_file_name := vv_file_name||vv_start_string||substr(each_file.name,instr(each_file.name,'\',1,3)+1)||vv_end_string;
         vn_counter := vn_counter + 1;
    end if;
    END LOOP;
    vv_file_name := substr(vv_file_name,1,length(vv_file_name)-1); -- remove final , from string
    execute immediate 'alter table '||pv_table_name||' location('||vv_file_name||')';
    pv_return_message := 'Successfully changed '||pv_table_name||' at '||pv_directory_path||' to now have '||to_char(vn_counter)||' directories';
    exception
    when others then
    vv_err := sqlerrm;
    pv_return_message := ' Error found updating directories. Error = '||vv_err;
    END;
    This reads every file in the directory and appends it to a list, so if it finds A.csv and ABC.csv, then using the dynamic sql, it alters the location to now read 'a.csv','abc.csv',
    It ignores all other file extentions.

  • My new users can not upload files via browse

    Hi there;
    When my recent created users can not download files via the browse within the Internet interface.
    When I hit the via browse I face the following:
    500 Internal Server Error
    oracle.ifs.common.IfsException: IFS-10406: Invalid AttributeValue conversion (DIRECTORYOBJECT to Java DirectoryObject)
    oracle.ifs.common.IfsException: IFS-10200: Unable to access object (insufficient privileges)
    Any hint?
    Sasan Ebadian

    Hi Sasan,
    These are the ACL's of IFS:
    PRIVATE Grants no permissions to any other user. Other users cannot view, modify, or delete a user’s document in any way, unless changed by the owner.
    PROTECTED For folders only. Enables other users to see the files in the folder, add documents and folders to the folder, and remove documents and folders they have created from the folder, but are not allowed to delete the folder itself.
    PUBLIC Allows full access to the item. All users can make any changes that the owner can make.
    PUBLISHED Allows other users to view the contents, but they are not allowed to modify or delete the document.
    If you attach the ACL Public it must work!
    Bob

  • HT3775 I am using OS X Mountain Lion and I have this .avi file but not able to read. What is missing in my setup and what other file do I need to download to enable me to read?  I can read mp4 files though.

    I am using OS X Mountain Lion and I have this .avi file but not able to read. What is missing in my setup and what other file do I need to download to enable me to read?  I can read mp4 files though.

    Here is a link: https://itunes.apple.com/en/app/mplayerx/id421131143?mt=12
    I agree that VLC is also a good choice but MPlayerX is more user friendly.

  • In pages, how do you view two copies of a doc simultaneously, so you can read one part while working on another?

    Is there a way to view two copies of a doc simultaneously, so I can read one part
    while I am working on another part?

    @fruhulda,
    Peter,
    In Mountain Lion, you can choose a [.pages,.doc,.docx] document and request that it open directly in Preview via the Open with... menu. This includes Word 97/2000/XP .doc files. You cannot do this in Snow Leopard.
    The Quick Look functionality on Mountain Lion (also by that name on Snow Leopard), allows one to select one or more documents in the Finder, and display them with a tap from the spacebar. On Mountain Lion, it will display the previous file types, and offer to open them in the default application. On Mountain Lion, Quick Look also offers a Sharing panel for e-mail, messages, and AirDrop. The e-mail option makes a proper attachment in Apple Mail.
    The Snow Leopard version of Quick Look will also open an OpenOffice .odt file, even when that application is not installed. A feature improvement over the Snow Leopard version, the Mountain Lion Quick Look offers to open the displayed document in the default application that would ordinarily open it with a double-click. Therefore, on Mountain Lion, with OpenOffice installed (default for .doc/x files on my machine), Quick Look opens the .doc/x and .odt files and offers to open them in OpenOffice.
    Quick Look can open other file formats including .rtf, graphics, etc.
    Peter's reference to Cover Flow is an alternative Finder view of a filesystem hierarchy. The front-most, selected document viewed in the Finder Cover Flow view, can be opened via the Quick Look button on the Finder toolbar.

  • Is it possible for a saved path to open a folder where the user can select the file to open?

    I would like to retieve a link via database that would open a folder of drawings, word documents, pdf files, excel files etc., where the user can select which file they want. Selected files would open in which ever format they were with programs that are already installed on the users computer. For example, the link would open a folder where several solid works files were, and a couple of Word documents. The user would select one of the Solid Works files, and it would open up in the Solid Works installation on the users computer. Is this possible, or must a link point directly to a file?

    I'm not sure I understand what you mean by "link". Are you referring to a URL that uses a "file://" protocol?
    The standard File Dialog VI has a "start path" input that you can set so the file dialog opens to that folder.

  • Get the root folder name once user will upload any files to subfolder with in this root folder using sharepoint designer WF??

    Hi,
    How to get the root folder name using sharepoint designer WF? i have a document library with root folders and subfolders. so i am trying to get the root specific root folder name attaching with email once user will
    upload any files to subfolders within that root folder.
    Thanks in advanced!

    Hi,
    According to your description, you might want to get the root folder name in SharePoint Designer Workflow when there is file uploading.
    The “Path” field of the current item holds the relative path of a file, as a workaround, you can retrieve the value of the “Path” as string, then split the string
    value with a delimiter character of “/” to meet your requirement.
    In SharePoint Designer 2010, there is no OOTB action to split the string. You can use the custom workflow actions below to achieve it.
    Here is a link about the related actions I use in this scenario:
    https://spdwfstringactions.codeplex.com/
    Settings of workflow as below:
    It works well in my environment:
    Best regards
    Patrick Liang
    TechNet Community Support

  • More than one user to read a file

    Hi,
    I would like to know how to allow more than one user to read a file.
    Any explanation or code samples will be helpful.
    Thanks in advance
    Regards
    Kutty

    I am not at all clear regarding your question?
    Ironluca

  • Is ther a BAPI or RFC that can read any table ?

    I want to read 35 tables in SAP database. Is ther a BAPI or RFC that can read any table ?
    If I use RFC to read these tables, I will write a lot of codes. It may be a large work.

    Check these FM
    RFC_READ_TABLE
    RFC_GET_TABLE_ENTRIES

  • If I install dng converter version 8.3 so I can read raw files from my new sony a7 camera, will I still be able to read raw files from my canon 5d ?

    if I install dng converter version 8.3 so I can read raw files from my new sony a7 camera, will I still be able to read raw files from my canon 5d ?

    Ok. That explains 8.3. I know some want to stay with 10.6 because they have software or hardware that won't work on anything later.
    Gene

  • Help - How a browser can read jar files?

    I have read in other forums that a browser can read jar files.
    Can someone point me to documentation explaining how this is done?
    Thanks.

    To explain my question more.
    I will be launching the browser from an application. Basically, I have help files (index, help html files) contained within a jar file.
    I am looking for a way to launch the browser and extract specific files within the jar file to display within the browser. For example, to display the index and the specific file containing the help text. Currently, my application launches Java Help. I want to change this to my application launching a browser and providing the same capabilities the Java Help provided such as searchin, indexing, context-sensitive, etc. I am trying to find the way to do this.
    Thanks.

  • I can't seem to read any file with ImageIO

    I am a rank beginner with Java, so I use a lot of code snippets I find online, and look every move up in the API docs. However, I am just trying to load a simple gif of png to use as a decoration on a panel, and it never succeeds. I successfully create a File from the file, a little image called line.gif. I use ImageIO exactly as it appears in a hundred simple examples and I get and IOException every time with the cause = "Can't read the file!". I am not even sure whether this means it can't deode the image or can't find the file.
    Here's the trivial code:
    BufferedImage img = null;
    try {
    //String formats[] = ImageIO.getReaderFormatNames();
    File imgFile = new File("line.gif");
    img = ImageIO.read(imgFile );
    The file is in the same directory as my java files, and I see that NetBeans has copied it to the build directory where my classes are being placed. I am sure I am doing something really dumb, but it looks like a blank wall. I hope you can help me because I have already spent a ridiculous amount of time on it.

    Thanks for some excellent advice. The NetBeans IDE confused me and I wasn't understanding where my working directory was, but I just found it before coming online and seeing your answer.
    I have another question at this point. Is it possible to build the images into your jar when you are ready to do put it all together, or do I have to keep them together with the code but outside the jar?

Maybe you are looking for